Known vulnerabilities in Microsoft Windows - page 48

Vendor: Microsoft
Software CPE: cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
Total vulnerabilities: 6306
Public exploits: 489
Known exploited (KEV): 267
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Microsoft Windows Microsoft Windows is affected by 6306 known vulnerabilities: 98 critical, 1206 high, 1123 medium, 3877 low Critical High Medium Low

Vulnerabilities (6306)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU126004 - Untrusted Pointer Dereference
CVE-2026-23670
CWE-822 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1607 10.0.14393.9060, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414128
#VU126003 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-25184
CWE-362 Low
No
No
10 1607 10.0.14393.9060, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414127
#VU126002 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-20930
CWE-362 Low
No
No
10 21H2 10.0.19044.7184, 10 22H2 10.0.19045.7184, 10 1809 10.0.17763.8644, 11 23H2 10.0.22631.6936, 11 24H2 10.0.26100.32690 14.04.2026 SB20260414126
#VU123879 - Exposure of sensitive information to an unauthorized actor
CVE-2026-25185
CWE-200 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 11.03.2026 SB2026031122
#VU123878 - Out-of-bounds read
CVE-2026-25174
CWE-125 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 11.03.2026 SB2026031121
#VU123785 - NULL Pointer Dereference
CVE-2026-25165
CWE-476 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 11.03.2026 SB2026031101
#VU123784 - Deserialization of Untrusted Data
CVE-2026-25166
CWE-502 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310131
#VU123783 - Use After Free
CVE-2026-25167
CWE-416 Low
No
No
10 1607 10.0.14393.8957, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310130
#VU123782 - Use After Free
CVE-2026-25170
CWE-416 Low
No
No
10 1607 10.0.14393.8957, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310129
#VU123781 - Use After Free
CVE-2026-25171
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310128
#VU123778 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24297
CWE-362 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511 10.03.2026 SB20260310126
#VU123777 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24296
CWE-362 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310125
#VU123776 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-24295
CWE-362 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310125
#VU123775 - Out-of-bounds read
CVE-2026-23672
CWE-125 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310124
#VU123774 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2026-23671
CWE-362 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310123
#VU123773 - Use After Free
CVE-2026-23669
CWE-416 Medium
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310122
#VU123772 - Use After Free
CVE-2026-23667
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310121
#VU123770 - Out-of-bounds read
CVE-2026-25175
CWE-125 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783 10.03.2026 SB20260310119
#VU123756 - Untrusted Search Path
CVE-2026-25190
CWE-426 High
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511, 11 23H2 10.0.22631.6783, 11 24H2 10.0.26100.7979, 11 24H2 10.0.26100.8037 10.03.2026 SB20260310111
#VU123755 - Use After Free
CVE-2026-25189
CWE-416 Low
No
No
10 21H2 10.0.19044.7058, 10 22H2 10.0.19045.7058, 10 1607 10.0.14393.8957, 10 1809 10.0.17763.8511 10.03.2026 SB20260310110


Showing elements 941 - 960 out of 6306